Overview

overview

7

Static

static

volksbank_...02.exe

windows7-x64

7

volksbank_...02.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae13b1c3cf71b696139349fae4e78f228a9171292bbab0b0632b1c796d8e9e50

  • Size

    144KB

  • Sample

    221124-ea2rrafa89

  • MD5

    a131e8ff8b27379d9699dcb3ed7f5529

  • SHA1

    c61f31bc37d7fb77135fe1ee16d22774286c58a6

  • SHA256

    ae13b1c3cf71b696139349fae4e78f228a9171292bbab0b0632b1c796d8e9e50

  • SHA512

    8626f993232b4025d524d5abb64b69cf569b4f46bc4eeb0b4b3595b183a4f68fe201052ad16b2190f84b9d9df741699b4a89d663e4e002deeb582da306f2ca73

  • SSDEEP

    3072:7Cy78PAbUjItjPL3SlNaT3uj/vniSPAw72jEy4TEMchBHM/Fk+QgBfDq3i2c:7C88PAIktjP7uNjzBY590ERvqk+Hl8c

Score
7/10
persistence

Malware Config

Targets

    • Target

      volksbank_de_transaktions_id_000023928001_2014_11_0000390382755_00003997550002.exe

    • Size

      196KB

    • MD5

      d7fd49d4410382601fe67202e8c1a79c

    • SHA1

      535a451840798c318ce47dbcc3dd2a44ee2fa547

    • SHA256

      734d09cbc840e4349a3d5fd4751e2237d7cc5066590cd0408e2cfad354fd4c38

    • SHA512

      83201380e91f4b8b6a3e3f57272717651842fe480a3c92c64289ec695e83e49abad633bdba0436886e89c90b6a9c4489ba0dc3236762b2f3598c4ed54c9037c4

    • SSDEEP

      3072:9NEZWOQdDuZph4fWy6c3v40y+rzqVCr+YARsI6u2t4Y9sBG0hac0v2DEoro+:9cKNuFIdt3vTrz1r+R7F2t4pUOEoB

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks